This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File:                     jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier:          maNyX1ncfgRVAiR7S4d8mWC/eWXf0T0PrvBCr6ZF0D4=
Subject key identifier:   4C:75:53:AA:E0:DA:36:14:87:F3:2A:D9:8A:C1:F4:FF:46:8A:6E:92
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer:       /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial:       019BF42BB3D1A14F05E188DB70280D3FB9F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number:          0829
Signing time:             Sun 25 Jan 2026 08:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:03 +0000
Files and hashes:         1: PQ4kixVMpunmZd3Y9lneEnubVHU.roa (hash: Yf8PqpssV4aPe31IuLnMjahZv8QaQaygjHQtEb4Jhyc=)
                          2: h8m3UyCHdJZvavzOM3kO78iBzSs.roa (hash: 7o6/q7pQ3291TBvgsO2xLF2/udPbMNgFs9of9Kxrm4o=)
                          3: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: P4HoupOI1z+mBXTBQKwojLG4lTNcSNZgFySXYm3TYso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:b3:d1:a1:4f:05:e1:88:db:70:28:0d:3f:b9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
        Validity
            Not Before: Jan 25 08:01:03 2026 GMT
            Not After : Jan 26 08:01:03 2026 GMT
        Subject: CN=4c7553aae0da361487f32ad98ac1f4ff468a6e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:28:42:85:d6:af:b1:4c:8a:22:62:96:cc:
                    13:e6:dd:23:3e:d1:15:8f:70:ae:1a:bc:2a:ff:6a:
                    57:88:db:49:72:1d:64:17:e2:0c:35:73:5f:30:31:
                    cc:90:e1:b3:55:98:24:b9:4b:b2:60:9e:8a:37:df:
                    de:10:63:d3:c0:d4:66:30:e4:75:67:cd:48:d1:69:
                    f7:e6:02:4d:79:d2:fb:7f:1c:d7:db:80:2e:1c:85:
                    47:5b:0f:85:e9:ef:99:74:25:24:b4:bc:97:00:9d:
                    92:ab:3f:3b:82:c8:e4:e5:c2:51:db:60:1e:0e:89:
                    1b:06:e3:c9:0e:28:26:ce:1b:dd:77:60:f2:26:88:
                    06:11:cf:d7:d7:a8:82:67:9a:5e:d4:96:50:74:dc:
                    93:d1:b9:4f:ef:bf:9e:36:f7:a9:22:22:dc:41:83:
                    16:7c:17:e2:97:56:ca:60:11:a4:da:85:47:52:c9:
                    ff:4b:52:30:56:e7:1e:62:8e:7f:72:ee:63:de:6c:
                    7b:eb:5d:20:62:36:62:06:23:7a:27:b8:d5:c3:b6:
                    03:16:ff:da:49:f0:4c:4a:b8:01:41:83:d5:93:dd:
                    7d:2f:63:51:81:74:78:f3:46:69:13:45:e8:80:84:
                    d7:35:81:d7:31:94:f8:da:70:34:75:fb:d9:55:a8:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:75:53:AA:E0:DA:36:14:87:F3:2A:D9:8A:C1:F4:FF:46:8A:6E:92
            X509v3 Authority Key Identifier:
                keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:32:56:22:0e:df:15:b3:ef:59:e0:cf:fa:45:d7:86:0c:
         0b:1f:b7:17:9f:eb:3a:f7:9b:6a:97:8d:c0:ab:b6:b3:e8:26:
         2e:db:4b:1d:af:43:1a:63:fc:3f:46:26:92:f7:5a:b9:f7:8a:
         cc:a6:e0:e9:85:b6:04:65:81:d9:d7:dd:03:03:01:91:39:5c:
         fd:5d:de:f1:19:ff:5d:98:c4:33:c8:0a:bb:1c:f9:38:2e:38:
         9b:10:cc:a9:49:93:35:dd:af:66:43:c2:9b:50:5b:2a:38:89:
         d5:ea:c5:b3:5c:6c:cd:b2:7d:2b:e7:49:60:48:e2:ea:99:48:
         8a:f2:d7:d4:56:5a:d0:d6:3a:0b:eb:82:0c:86:f8:4b:f9:61:
         fb:dc:e5:3f:59:8f:77:65:42:8d:5f:4d:0a:7e:06:06:7b:2b:
         cd:57:ad:0d:f1:81:85:c6:4b:8a:ae:9b:2e:f9:05:bf:5d:08:
         06:40:d2:be:82:f7:e6:58:ee:80:01:06:2e:74:c5:31:30:46:
         32:0a:76:02:22:eb:59:cd:0c:4d:ee:f2:cd:69:f5:ae:a8:f2:
         c2:54:48:31:df:43:44:7b:3e:3b:32:86:75:71:a6:96:70:ad:
         8d:cd:93:e8:54:97:9f:84:79:18:c1:32:d6:e8:b1:69:c7:df:
         73:9d:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:13 2026 by rpki-client